$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer File: 8b56caea-2136-4342-baff-6f31268d4cc4.cer (raw, json) Hash identifier: M4Q4XczivHYZL/6QPvRKC09A9ckvBFQtz/yKamnIhOM= Subject key identifier: 5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584DAAD88AE4F1C6CC326C6E16E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 29 Apr 2026 12:45:18 +0000 Certificate not after: Tue 01 Aug 2028 12:45:18 +0000 Subordinate resources: IP: 23.146.24.0/24 IP: 140.235.4.0/22 IP: 2602:faaf::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:d8:8a:e4:f1:c6:cc:32:6c:6e:16:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Apr 29 12:45:18 2026 GMT Not After : Aug 1 12:45:18 2028 GMT Subject: CN=8b56caea-2136-4342-baff-6f31268d4cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0b:d1:4d:5a:d2:d9:d1:ea:e6:2b:64:4c:8f: 80:9b:a6:6e:d6:b9:27:a7:3d:e0:d9:94:84:1c:ef: 5c:af:26:c8:6d:20:f8:28:c8:24:01:2e:a0:59:e5: 82:9c:61:ea:94:2b:e0:30:c6:9d:5d:a7:1f:84:ad: 65:4b:86:8e:37:c6:ec:62:ba:3f:91:86:8e:e8:6a: ab:95:67:0d:f7:3c:34:57:2c:83:6d:80:19:80:5b: fb:6e:2c:d6:8f:c8:93:1f:0e:80:15:3c:52:1d:9b: 21:d2:2b:d6:69:3e:68:8d:a7:b7:5a:27:17:ed:5e: 8e:f8:6a:14:25:2b:fa:68:78:97:d0:24:45:94:42: f7:26:a0:94:50:f6:71:42:30:12:86:fa:71:dc:50: 55:84:36:41:6b:fb:c1:ac:a7:40:97:96:68:7b:7a: cf:63:c5:ef:f1:87:ac:67:60:b6:15:4d:78:df:55: 70:60:31:ca:3f:25:ae:ae:8b:46:5c:94:7d:69:c3: 31:3b:20:1e:e1:dd:00:31:38:7f:52:5f:8b:f3:c3: 09:e4:5a:a1:33:e0:36:5c:81:1e:ce:84:92:fb:20: ed:e1:f3:0b:af:c2:59:65:dc:54:15:a7:db:99:9c: 17:aa:ae:0c:fc:f8:fa:81:d5:f5:ce:12:da:aa:df: ef:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.146.24.0/24 140.235.4.0/22 IPv6: 2602:faaf::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:07:b0:c3:f6:cf:49:c4:fe:e8:d7:57:37:d3:3d:a0:23:ff: 2f:7f:d6:eb:3c:4e:af:d4:a5:a5:77:39:f2:1d:81:f5:73:56: e8:c6:c0:32:2b:5a:5a:69:3b:91:96:cf:26:b6:28:75:56:60: ee:3b:a3:34:20:22:7c:7e:fa:db:25:23:cb:88:a2:bb:71:4b: af:70:d6:d0:18:44:7f:f0:27:38:b1:bf:4d:03:24:04:0e:46: ef:ba:bd:87:cf:f3:e5:ee:19:d8:58:41:38:c5:a4:5c:cb:5e: b1:b7:b0:b6:60:46:26:4b:e3:12:b6:9e:1b:3f:5d:c7:3a:9a: f7:0d:6e:9d:f3:89:66:53:b0:1b:3c:20:cf:64:80:63:72:2f: c6:59:d1:4c:a3:4a:b5:c4:5b:c7:33:d0:b4:ab:15:65:b8:18: da:15:e3:c0:34:91:b9:58:e9:b5:c1:ad:e6:1b:46:9a:a2:b4: 60:81:13:71:bb:6e:fa:25:a1:8a:eb:08:95:d3:c0:3f:35:a5: 0d:6f:ec:75:b1:2a:22:46:0c:c1:c2:a8:a1:41:66:31:8c:c7: 44:c5:a7:95:ac:bc:08:b2:0e:74:34:41:00:7a:1e:b7:a3:f5: 88:6f:a1:31:30:d3:24:5e:85:a3:ee:54:ca:05:a7:ca:79:34: 21:98:9e:a4 -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWE2q2Irk8cbMMmxuFuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDQyOTEyNDUxOFoXDTI4MDgwMTEyNDUxOFowLzEtMCsGA1UEAxMk OGI1NmNhZWEtMjEzNi00MzQyLWJhZmYtNmYzMTI2OGQ0Y2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwvRTVrS2dHq5itkTI+Am6Zu1rknpz3g2ZSE HO9crybIbSD4KMgkAS6gWeWCnGHqlCvgMMadXacfhK1lS4aON8bsYro/kYaO6Gqr lWcN9zw0VyyDbYAZgFv7bizWj8iTHw6AFTxSHZsh0ivWaT5ojae3WicX7V6O+GoU JSv6aHiX0CRFlEL3JqCUUPZxQjAShvpx3FBVhDZBa/vBrKdAl5Zoe3rPY8Xv8Yes Z2C2FU1431VwYDHKPyWurotGXJR9acMxOyAe4d0AMTh/Ul+L88MJ5FqhM+A2XIEe zoSS+yDt4fMLr8JZZdxUFafbmZwXqq4M/Pj6gdX1zhLaqt/vswIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFFuUaT0IzkiCFeY5lnEhIw2QqMPdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84 YjU2Y2FlYS0yMTM2LTQzNDItYmFmZi02ZjMxMjY4ZDRjYzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzhiNTZjYWVhLTIxMzYtNDM0Mi1i YWZmLTZmMzEyNjhkNGNjNC84YjU2Y2FlYS0yMTM2LTQzNDItYmFmZi02ZjMxMjY4 ZDRjYzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXkhgDBAKM6wQwDgQCAAIwCAMGACYC+q8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0HsMP2z0nE/ujXVzfTPaAj/y9/1us8Tq/UpaV3OfIdgfVzVujGwDIr WlppO5GWzya2KHVWYO47ozQgInx++tslI8uIortxS69w1tAYRH/wJzixv00DJAQO Ru+6vYfP8+XuGdhYQTjFpFzLXrG3sLZgRiZL4xK2nhs/Xcc6mvcNbp3ziWZTsBs8 IM9kgGNyL8ZZ0UyjSrXEW8cz0LSrFWW4GNoV48A0kblY6bXBreYbRpqitGCBE3G7 bvoloYrrCJXTwD81pQ1v7HWxKiJGDMHCqKFBZjGMx0TFp5WsvAiyDnQ0QQB6Hrej 9YhvoTEw0yRehaPuVMoFp8p5NCGYnqQ= -----END CERTIFICATE-----Generated at Wed May 6 23:40:47 2026 by rpki-client